Prod - August 2026 Release 1

ReadMe.md

@@ -174,6 +174,10 @@ Content-Type: application/json
 }
 ```
 
+The endpoint accepts M2M tokens with `refresh:member_stats`, `update:user_profiles`,
+or `all:user_profiles`. Autopilot uses the stats refresh scope when synchronizing
+completed challenge results. User tokens require the `administrator` or `admin` role.
+
 `GET /v6/members/{handle}` includes a public `challengePoints` object by default:
 
 ```json

docs/swagger.yaml

@@ -182,7 +182,8 @@ paths:
         Replace the stored point awards for one challenge. This endpoint mirrors point-based challenge prize payouts into member-api so member profiles can return challenge point totals and per-challenge details.
 
         Authorization:
-          - M2M scopes: `update:user_profiles` or `all:user_profiles`.
+          - M2M scopes: `update:user_profiles`, `refresh:member_stats`, or `all:user_profiles`.
+          - User roles: `administrator` or `admin`.
       security:
         - bearer: []
       parameters: